OL 8 must not have the asynchronous transfer mode (ATM) kernel module installed if not required for operational support.

An XCCDF Rule

Description

<VulnDiscussion>The ATM is a transport layer protocol designed for digital transmission of multiple types of traffic, including telephony (voice), data, and video signals, in one network without the use of separate overlay networks. Disabling ATM protects the system against exploitation of any flaws in its implementation.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>

ID: SV-248829r943071_rule
Severity: Medium
References: CCI-000366
Updated: 8 months ago

Configure OL 8 to disable the ability to use the "atm" kernel module. 
 
Create a file under "/etc/modprobe.d" with the following command: 
 
     $ sudo touch /etc/modprobe.d/atm.conf 
 Add the following line to the created file: 
 
     install atm /bin/false
 
Configure OL 8 to disable the ability to use the atm kernel module. 
 
     $ sudo vi /etc/modprobe.d/blacklist.conf 
 
Add or update the line: 
 
     blacklist atm

OL 8 must not have the asynchronous transfer mode (ATM) kernel module installed if not required for operational support.

Description

Remediation - Manual Procedure